The specific flaw exists within the edit_lf_process resource of the AccuRev Reprise License Manager service. The issue lies in the ability to write arbitrary files with controlled data. An attacker could leverage this vulnerability to execute arbitrary code under the context of SYSTEM.
This update introduces a number of improvements related to the architecture
of the agent installed and scenarios where multiple targets are tested.
This update introduces a number of improvements related to the architecture
of the agent installed and scenarios where multiple targets are tested.
CVE Link
Exploit Type - Old
Exploits/Remote
Exploit Platform
Product Name